Analysis
- user interaction
yes - max time kernel
12s - max time network
8s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 18:36
Behavioral task
behavioral1
Sample
bore.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bore.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target bore.exe
- Size 9.9MB
- Sample261113-w9a7hsft2w
- SHA256 059a3d8231690f10a74adb1e9ef350ec523bbc78c12087d3cefaf069c1e42f35
- MD5 945ead1cbd483313e3deb2baa616042d
- SHA1 f788deb34162ccc4304bf9af71d983f779d043f0
- SHA512 cefaca4ef2476927238489f5e5d0c09ed76d49b6f99130671dfc42a19e1678811ccdbc38d11a477f4c85fc858e471bc9fc1d3a3ca9e93109424c7004b422fffc
- SSDEEP 196608:Md0W8/9E6x8OXMCHGLLc54i1wN+VPIcu9KYK39srRqZksfiU3PPTE3MrROv5:MWW81x8OXMCHWUj6cuIOeT3/PTY3
- TLSH T1BEA63388BBC400E8E8576139EDE12A9796E970B603B4C6D74BF44E912D732C4EE79713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 6 IoCs
pid Process 1564 bore.exe 1564 bore.exe 1564 bore.exe 1564 bore.exe 1564 bore.exe 1564 bore.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4364 wrote to memory of 1564 4364 bore.exe 89
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\VCRUNTIME140.dll
- Size 117KB
- SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
- MD5 862f820c3251e4ca6fc0ac00e4092239
- SHA1 ef96d84b253041b090c243594f90938e9a487a9a
- SHA512 2f8a0f11bccc3a8cb99637deeda0158240df0885a230f38bb7f21257c659f05646c6b61e993f87e0877f6ba06b347ddd1fc45d5c44bc4e309ef75ed882b82e4e
- SSDEEP 1536:N9TXF5LLXQLlNycKW+D4SdqJk6aN1ACuyxLiyazYaCVoecbdhgOwAd+zfZ1zu:N9jelDoD9uyxLizzFzecbdPwA87S
- TLSH T1A2C38D4572A042F7D17AD274C1A36A17FB75B94487A0A3CF03B58A650F13BE0AE3D396
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\_bz2.pyd
- Size 82KB
- SHA256 fc3b481684b926350057e263622a2a5335b149a0498a8d65c4f37e39dd90b640
- MD5 cb8c06c8fa9e61e4ac5f22eebf7f1d00
- SHA1 d8e0dfc8127749947b09f17c8848166bac659f0d
- SHA512 e6da642b7200bfb78f939f7d8148581259baa9a5edda282c621d14ba88083a9b9bd3d17b701e9cde77ad1133c39bd93fc9d955bb620546bb4fcf45c68f1ec7d6
- SSDEEP 1536:Kdrz7l1EVLsSuvX3dUK4MLgqK7YEog8y5sV8lIJLVy7SyFB:urzcuvXvrEo7y6V8lIJLVyB
- TLSH T16F838E42E3A56AF5F86B80B956C10367E771B954075093EFF348C2693F02F426DAC36A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\_ctypes.pyd
- Size 128KB
- SHA256 f63c6c7e71c342084d8f1a108786ca6975a52cefef8be32cc2589e6e2fe060c8
- MD5 a55e57d7594303c89b5f7a1d1d6f2b67
- SHA1 904a9304a07716497cf3e4eaafd82715874c94f1
- SHA512 ffa61ad2a408a831b5d86b201814256c172e764c9c1dbe0bd81a2e204e9e8117c66f5dfa56bb7d74275d23154c0ed8e10d4ae8a0d0564434e9761d754f1997fc
- SSDEEP 3072:3RF024DWkT/DKGkXY402iXnVJf/FO50XnekZ39gPhvEQZIJyPArm:j0nHT/DKFXZorf/FO50uW3SEQt
- TLSH T1A2D36C0B735800AADA779178C5736F47DBF1B456171087CF02A8C5AA2F63BA26E7E341
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\_lzma.pyd
- Size 154KB
- SHA256 d080eabd015a3569813a220fd4ea74dff34ed2a8519a10473eb37e22b1118a06
- MD5 1ba022d42024a655cf289544ae461fb8
- SHA1 9772a31083223ecf66751ff3851d2e3303a0764c
- SHA512 2b888a2d7467e29968c6bb65af40d4b5e80722ffdda760ad74c912f3a2f315d402f3c099fde82f00f41de6c9faaedb23a643337eb8821e594c567506e3464c62
- SSDEEP 3072:KbbS4R/G4Z8r7NjwJTSUqCRY4By7znfB9mNowgn0lCelIJ012+j:KbR/8oWeBi5YOwflCe8o
- TLSH T1B9F34982A794F4E5F7728C78D6624F17E7F5781A032092DA01CC876D2B1FB659E2A313
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\base_library.zip
- Size 1.3MB
- SHA256 6622c01224a38f34bc2d91c200de4ed56fd05af54a5aa5efb0ce647b8400e001
- MD5 416044adf8a0c98fe3d0284c7b37558a
- SHA1 82d4d62901a389a6eed910d9c60373e34b729166
- SHA512 03d5301b0d22abeebb742f06863da5686c62478ee37383da2c8c39a9f0c36490696c7f848eb784618cfc629a58a9efdfa638463195ef05f7ac10abd654bdba35
- SSDEEP 12288:IIZuLHS91lPW7WpKi2cPudx5/2L+DordjQSCnP6RXN77NLeGQb9lyuOBg80201jA:YDSH07WpK5cPudx5/kddCQHaaRwm
- TLSH T195551A92B9527953FF14F37B80B7484CF32E86A2EF00C207355A42661FFEAB49D59588
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI0000110c2\python313.dll
- Size 5.8MB
- SHA256 0c0a66505093b6a4bb3475f716bd3d9552095776f6a124709c13b3f9552c7d99
- MD5 b9de917b925dd246b709bb4233777efd
- SHA1 775f258d8b530c6ea9f0dd3d1d0b61c1948c25d2
- SHA512 f4bf3398f50fdd3ab7e3f02c1f940b4c8b5650ed7af16c626ccd1b934053ba73a35f96da03b349c1eb614bb23e0bc6b5cc58b07b7553a5c93c6d23124f324a33
- SSDEEP 49152:fXGc3O7T4DKX+vLFMmKYxiAYNBD987KdJlI9HbeX2jrgQcw6Zc4h67mM+XDQ3bLi:Of42zJiwJl/YF7v3vaHDMiEN3Kr
- TLSH T1E9568D16729D40ADC97B8078CA038A4BF7B27C417F60534B61A6BB5E2F733624B6E705
- MD5 SHA1 SHA512 SSDEEP TLSH